CVE-2020-6558: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6558 is a high-severity vulnerability discovered in Google Chrome's iOSWeb component. The vulnerability was identified on July 24, 2020, and affects Google Chrome on iOS versions prior to 85.0.4183.83. The flaw stems from insufficient policy enforcement that could allow a remote attacker to bypass navigation restrictions through a crafted HTML page (Chrome Release).

The vulnerability is classified with a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. This indicates that the vulnerability can be exploited remotely, requires low attack complexity, needs no privileges, but does require user interaction. The scope is unchanged, with no impact on confidentiality, high impact on integrity, and no impact on availability (NVD).

The vulnerability allows remote attackers to bypass navigation restrictions through a crafted HTML page, potentially compromising the integrity of the browser's security controls. This could lead to unauthorized navigation or access to restricted content (SecurityWeek).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. No evidence of active exploitation in the wild has been publicly reported at the time of the vulnerability's disclosure (NVD).

The vulnerability was patched in Chrome version 85.0.4183.83. Users are advised to update to this version or later to mitigate the risk. The fix was included as part of Chrome's stable channel update for desktop (Chrome Release).

The vulnerability was reported by Alison Huffman from Microsoft Browser Vulnerability Research, demonstrating ongoing security research collaboration between major technology companies. The fix was part of Chrome 85's release which included a total of 20 security fixes (SecurityWeek).